f7ea4d2fec1d11bcb526779ff19097131715e3a4b0ccbc968258971e4cadf514 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

316940f6e47a9df923c353e316d67250N.exe
Size

44KB
Sample

240806-a17cpsxeph
MD5

316940f6e47a9df923c353e316d67250
SHA1

869c5b2dd7875973d6f7f61e58fe60cc40860a03
SHA256

f7ea4d2fec1d11bcb526779ff19097131715e3a4b0ccbc968258971e4cadf514
SHA512

d9842ea3caf935694d0dd74e9fdd2beed03af6c6439fc72d3543a7d3ae3d7dc00566540c431355b88a2ad9784ab180e2a27a29171025358cdf07e613ecf784bb
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJwRJofJoinI5nI/hGuhG3:W7ZppApaJofJoiwEdK

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  316940f6e47a9df923c353e316d67250N.exe
- Size
  
  44KB
- MD5
  
  316940f6e47a9df923c353e316d67250
- SHA1
  
  869c5b2dd7875973d6f7f61e58fe60cc40860a03
- SHA256
  
  f7ea4d2fec1d11bcb526779ff19097131715e3a4b0ccbc968258971e4cadf514
- SHA512
  
  d9842ea3caf935694d0dd74e9fdd2beed03af6c6439fc72d3543a7d3ae3d7dc00566540c431355b88a2ad9784ab180e2a27a29171025358cdf07e613ecf784bb
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJwRJofJoinI5nI/hGuhG3:W7ZppApaJofJoiwEdK
Score

9^/10

discovery ransomware
- Renames multiple (3191) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware